Logo
Abstract visual representing SAP implementation services

Privacy Policy

Privacy Statement

Scope

This Privacy Statement explains how ROBOXA Services Pte. Ltd. (we, our, or us) collects, uses, and safeguards personal data in compliance with data protection laws, including the General Data Protection Regulation (GDPR) standards and GAMP5, GxP 21 CFR Part 11 for the life sciences and pharmaceutical industries. This statement is displayed on our SAP Store Content Page and applies to our internal SAP CRMS to ensure adherence to clinical trial and data security requirements.

Introduction

At ROBOXA Services Pte. Ltd., we prioritize your privacy and the protection of your personal data. While you can browse our website without sharing personal data, access to certain services may require data processing. In cases where no legal basis for processing exists, we seek your explicit consent.

Personal data refers to information such as names, addresses, email addresses, or telephone numbers that can identify an individual. All data processing activities are conducted in line with GDPR and other relevant data protection laws. Although we implement comprehensive technical and organizational measures to safeguard data, no internet-based transmission is entirely secure. As such, users are advised to use alternative communication channels, such as telephone, for sensitive data transmission.

Use of Cookies

Our website uses cookies, which are small text files stored by your browser on your device to facilitate website navigation and enhance user experience. These cookies may include a unique identifier that helps us recognize your browser and tailor our services to your preferences. You can modify your browser settings to manage cookie permissions, including allowing or blocking cookies entirely or only in specific cases. Note that disabling cookies may limit the functionality and performance of certain website features.

Collection of General Data and Information

Each time a data subject or an automated system accesses our website, general data and information are collected and stored in server log files. This may include:

  • Browser types and versions used
  • The operating system of the accessing device
  • The referrer page (the previously visited page)
  • Sub-pages accessed on our website
  • Date and time of access
  • Internet Protocol (IP) address
  • Internet Service Provider (ISP) details
  • Other data relevant to IT security, such as information for cyberattack response

This information does not identify specific users but is necessary for properly delivering website content, maintaining system functionality, optimizing content, and supporting law enforcement in the event of a security breach. We use this anonymized data for statistical purposes to improve data protection and security measures.

Contact via Website

Our website provides contact options, including email addresses, for direct communication. When you reach out to us, the personal data shared will be stored for the purpose of processing your inquiry or follow-up communications. This data will not be shared with third parties without your consent.

Routine Deletion and Blocking of Personal Data

We process and store personal data only for the period necessary to achieve the purpose for which it was collected or as legally mandated. Once the purpose of storage is fulfilled or a legally defined storage period expires, personal data is either blocked or deleted in compliance with statutory regulations.

Data Subject Rights

  • Right of Confirmation: You have the right to ask if your personal data is being processed.
  • Right of Access: You can request detailed information about your stored personal data, the purpose of its processing, categories of data, recipients, storage periods, and your rights to rectification or erasure.
  • Right to Rectification: You may request the correction of inaccurate or incomplete personal data.
  • Right to Erasure: Under certain conditions, you have the right to request the deletion of your personal data, such as when it is no longer needed for its original purpose or if you withdraw your consent.
  • Right to Restrict Processing: You can request a restriction on the processing of your data if you contest its accuracy, oppose its erasure, or need the data for legal claims while it is no longer required for processing.
  • Right to Data Portability: You can request that your personal data be provided to you in a structured, machine-readable format or transferred to another controller.
  • Right to Object: You can object to data processing for reasons related to your specific situation or for direct marketing purposes.
  • Automated Decisions and Profiling: You have the right to avoid decisions based solely on automated processing, including profiling, that significantly affects you.

Legal Basis for Processing

We process personal data based on one of the following legal grounds:

  • Consent: Your explicit consent for specific data processing purposes.
  • Contractual Obligation: Data processing necessary for the fulfillment of a contract.
  • Legal Compliance: Processing required to comply with legal obligations.
  • Legitimate Interests: Processing that supports our business operations in a way that balances our interests with your rights and freedoms.

All data processing activities comply with GDPR, GxP, GAMP5, and 21 CFR Part 11 standards for regulated industries.

Legitimate Interests in Data Processing

We may process personal data based on our legitimate interests, which include business management and enhancement activities that benefit our employees and stakeholders while maintaining compliance with applicable laws.

Duration of Data Storage

Personal data retention is based on statutory retention periods. After these periods expire, the data is deleted unless required for ongoing contract obligations or legal purposes.

Legal or Contractual Data Requirements

In some cases, providing personal data may be a legal or contractual requirement necessary for entering into an agreement. Without such data, contract formation or fulfillment may not be possible. We will inform you if the provision of personal data is mandatory and explain the consequences of non-provision.

Automated Decision-Making

ROBOXA Services Pte. Ltd. does not use automated decision-making processes, including profiling, that could have significant effects on individuals.